Survey of PGP implementations¶

• Survey of PGP implementations
  • SDKs
    • gnupg-for-java
    • BouncyCastle
    • STEED
    • Didisoft OpenPGP Library for Java
  • Android Apps
    • OpenPGP Keychain
    • APG - Android Privacy Guard
    • KeyRing

SDKs¶

gnupg-for-java¶

• JNI wrapper for gpgme
• https://github.com/smartrevolution/gnupg-for-java
• native code is fast

limitations:

• wrapper of a wrapper of a wrapper
• only does what gpgme can do (tho a lot, its not everything)
• needs some JNI work to expose all of gpgme

BouncyCastle¶

• partially included in Android
• used by APG and OpenPGP Keychain
• Java implementation, slower than native like GnuPG

STEED¶

• http://g10code.com/steed.html
• initiative to make OpenPGP more accessible to novices
• LWN article: STEED: End-to-end email encryption
• vaporware

Didisoft OpenPGP Library for Java¶

• http://www.didisoft.com/java-openpgp/
• proprietary
• seems to lack:
  • methods to talk with keyservers
  • methods for managing key certification signatures

Android Apps¶

OpenPGP Keychain¶

• https://github.com/dschuermann/openpgp-keychain

limitations:

• no method for uploading personal public key
• no method to view signatures on a key
• no PGP/MIME support
• describes key generation feature as "still kind of beta"

APG - Android Privacy Guard¶

• http://thialfihar.org/projects/apg/
• https://github.com/thialfihar/apg

limitations:

• no method for uploading personal public key
• no method for signing other people's keys
• no method to view signatures on a key
• no PGP/MIME support
• describes key generation feature as "still kind of beta"

KeyRing¶

• http://www.imaeses.nl/KeyRing/Home.html
• proprietary